Lucene search

K
cve[email protected]CVE-2012-0150
HistoryFeb 14, 2012 - 10:55 p.m.

CVE-2012-0150

2012-02-1422:55:02
CWE-119
web.nvd.nist.gov
106
cve-2012-0150
buffer overflow
msvcrt.dll
microsoft
windows
vista
windows server
r2
windows 7
vulnerability
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.933 High

EPSS

Percentile

99.1%

Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, aka “Msvcrt.dll Buffer Overflow Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_7x86
OR
microsoftwindows_7sp1x86
OR
microsoftwindows_server_2008sp2itanium
OR
microsoftwindows_server_2008sp2x64
OR
microsoftwindows_server_2008sp2x86
OR
microsoftwindows_server_2008Matchr2itanium
OR
microsoftwindows_server_2008Matchr2x64
OR
microsoftwindows_vistasp2

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.933 High

EPSS

Percentile

99.1%